CVE-2020-0939

—

CVSS 3.1

5.5 medium

EPSS

9%p95

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947.

Vendors: microsoft
Products: windows 10, windows server 2016
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (8.7%)

In the news2 stories

Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media Foundation

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability in the wildCVE-2020-09391

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability CVE-2020-0939 CVE-2020-0687 CVE-2020-0907+110 CVEs